When a platform stops responding or blocks a withdrawal, the evidence starts to disappear: sites change domains, chats get deleted, and accounts get closed. Saving it in time is the most useful thing you can do today, whatever your next step is.
Short answer
Save five things as soon as possible: the complete chats with their dates, screenshots of your balance and the platform’s history, the receipt for every payment, the hashes (TXIDs) and addresses if you sent cryptocurrency, and a simple timeline of what happened. Never share passwords, seed phrases, or remote access to your computer.
1. The conversations
Export the complete chats from WhatsApp, Telegram, or social media, with dates. In WhatsApp, you can use the “Export chat” option from the conversation menu. Also take screenshots of the key messages: promises of profits, payment instructions, and requests for fees.
2. The platform
- Screenshots of your balance, your trading history, and the withdrawal page.
- Any message asking you to pay “taxes,” “fees,” or “insurance” to withdraw.
- The exact web address, the name of the app, and the contact emails or phone numbers.
- Any contracts, terms and conditions, or documents they sent you.
3. The payments
- Receipts for every transfer, with the reference number and the destination account.
- Bank or card statements that show the charges.
- Bitcoin ATM receipts, if you used one.
4. If you sent cryptocurrency
Save the hash of each transaction (also called the TXID), the destination address, the network used, and a screenshot of the withdrawal history from the exchange or your wallet. With that information, the path of the funds can be reconstructed on a public blockchain.
5. A simple timeline
Write down in a table the dates, the amounts, the payment method, and who asked you for each payment. You can use our timeline template. It doesn’t need to be perfect: it’s the foundation for any report or analysis.
How to name and store your files
Use names that sort themselves, for example: 2026-03-14_bank_transfer_2500USD.pdf. Keep a copy in a second place that you control, such as a USB drive or your own cloud storage.
What you should never share
Not with the platform, and not with anyone offering to help: passwords, verification codes, seed phrases, private keys, remote access to your computer, or full account or card numbers. No serious analysis needs them.
Already gathered your evidence? Send us your case review request and we’ll tell you, at no cost, whether your case can be analyzed.
If you sent cryptocurrency, this information is the basis for crypto tracing.
If you sent USDT and the platform now says it’s frozen, follow this guide.
Not sure where to find the hash for each transfer? We explain what a transaction hash is and where to find it.
